69 matches found
CVE-2025-3416
A flaw was found in OpenSSL's handling of the properties argument in certain functions. This vulnerability can allow use-after-free exploitation, which may result in undefined behavior or incorrect property parsing, leading to OpenSSL treating the input as an empty string. Mitigation Mitigation f...
CVE-2024-45699
The endpoint /zabbix.php?action=export.valuemaps suffers from a Cross-Site Scripting vulnerability via the backurl parameter. This is caused by the reflection of user-supplied data without appropriate HTML escaping or output encoding. As a result, a JavaScript payload may be injected into the abo...
CVE-2024-36465
A flaw was found in Zabbix API CApiService.php. This vulnerability allows a low-privilege user with API access to execute arbitrary SQL commands via the groupBy parameter. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Produ...
CVE-2024-58086
CVE-2024-58086 is a Linux kernel vulnerability in the DRM/V3D driver where the active perfmon (v3d->active_perfmon) could be left dangling during destruction. The fixed behavior, as noted in the patch referenced by commit 7d1fd3638ee3, stops the active perfmon before it is destroyed, addressin...
Linux Distros Unpatched Vulnerability : CVE-2024-58086
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Stop active perfmon if it is being destroyed If the active performance monitor...
CVE-2025-1372
A flaw was found in GNU elfutils. This vulnerability allows buffer overflow, potentially leading to arbitrary code execution or crashes via manipulation of the 'z/x' argument in the dumpdatasection/printstringsection function of readelf.c. Mitigation Mitigation for this issue is either not...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an incorrect configuration of the PCIe port node in the DTS file for the MIPS architecture Loongson64, which...
Security update for the Linux Kernel (Live Patch 24 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-15040024111 fixes several issues. The following security issues were fixed: CVE-2024-36904: tcp: Use refcountincnotzero in tcptwskunique bsc1225733. CVE-2024-43861: Fix memory leak for not ip packets bsc1229553. CVE-2024-35905: Fixed int overflow for stack...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an opregion resource leak in the drm/xe component, which could lead to wasted system memory and stability...
SUSE-SU-2023:3444-1 Security update for qemu
This update for qemu fixes the following issues: - CVE-2023-0330: Fixed a stack overflow due to a DMA reentrancy issue. bsc1207205 - CVE-2023-3354: Fixed a remote unauthenticated DoS due to an improper I/O watch removal in VNC TLS handshake. bsc1212850 - CVE-2023-3180: Fixed a heap buffer overflo...
MGASA-2023-0174 Updated suricata packages fix security vulnerability
Various security, performance, accuracy and stability issues. See referenced package announcements for details...
Fedora 36 : suricata (2023-8febb13d07)
The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-8febb13d07 advisory. Various security, performance, accuracy, and stability issues have been fixed. Tenable has extracted the preceding description block directly from the Fedora...
SUSE-SU-2022:2817-1 Security update for ceph
This update for ceph fixes the following issues: - Update to 16.2.9-536-g41a9f9a5573: + bsc1195359, bsc1200553 rgw: check bucket shard init status in RGWRadosBILogTrimCR + bsc1194131 ceph-volume: honour osddmcryptkeysize option CVE-2021-3979 - Update to 16.2.9-158-gd93952c7eea: + cmake: check for...
Virtuozzo Hybrid Infrastructure 5.0 (5.0.0-137)
In this release, Virtuozzo Hybrid Infrastructure provides a wide range of new features that enhance service providers' interoperability and help expand their services. The improvements cover compute services, object storage, security, and monitoring. Additionally, this release delivers stability...
OPENSUSE-SU-2021:2393-1 Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 78.12.0 ESR Fixed: Various stability, functionality, and security fixes MFSA 2021-29 bsc1188275 CVE-2021-29970 bmo1709976: Use-after-free in accessibility features of a document CVE-2021-30547 bmo1715766:...
OPENSUSE-SU-2021:1914-1 Security update for libopenmpt
This update for libopenmpt fixes the following issues: Various bugfix and stability issues were fixed, some of those might have security impact. libopenmpt was updated to 0.3.28: Fixed excessive memory consumption with malformed files in various formats. Changes in 0.3.27: AMS: Avoid allocating...
OPENSUSE-SU-2020:1748-1 Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 78.4.0 ESR Fixed: Various stability, functionality, and security fixes MFSA 2020-46 bsc1177872, bsc1176756 CVE-2020-15969 Use-after-free in usersctp CVE-2020-15683 Memory safety bugs fixed in Firefox 82...
OPENSUSE-SU-2020:1155-1 Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 78.1.0 ESR Fixed: Various stability, functionality, and security fixes bsc1174538 CVE-2020-15652: Potential leak of redirect targets when loading scripts in a worker CVE-2020-6514: WebRTC data channel...
OPENSUSE-SU-2020:0933-1 Security update for rust, rust-cbindgen
This update for rust, rust-cbindgen fixes the following issues: rust was updated for use by Firefox 76ESR. - Fixed miscompilations with rustc 1.43 that lead to LTO failures bsc1173202 Update to version 1.43.1 - Updated openssl-src to 1.1.1g for CVE-2020-1967. - Fixed the stabilization of AVX-512...
